IBM Security Access Manager Container privilege escalation

Vulnerability

IBM Security Verify Access Appliance and Docker versions 10.0.0.0 through 10.0.6.1 contain an improper security configuration that allows a local user to escalate privileges. This affects the container deployment specifically, as noted in the advisory [1].

Exploitation

An attacker with local access to the system can exploit the insecure configuration to elevate privileges. No authentication or user interaction is required beyond local shell access. The improper configuration likely grants elevated permissions to a user or group.

Impact

A successful exploit allows the attacker to gain elevated privileges, potentially leading to root-level access to the container. This could result in full compromise of the affected system, including unauthorized access to sensitive data and the ability to modify or disrupt services.

Mitigation

IBM has released fixes as part of IBM Security Verify Access updates. Affected users should upgrade to the latest version as recommended in the security bulletin [1]. If patching is not immediately possible, restrict local access to trusted users only.